last executing test programs: 20.679104718s ago: executing program 4 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 20.573839047s ago: executing program 4 (id=21): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x361020e) pwritev(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500001400000000400600000a0000010a000002005000500000000100000b01601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 20.468320445s ago: executing program 4 (id=25): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='\xec\xd2=(L\x9f\x1c&\xb7\x98\f\x87\xcf\xdb\xb4\xdc.\xc1\xec\xa3\x04\xa2\xb8H\xdc#\x06\npr:\x95\xb9\xbf7\xe6Z\x8aX\xbc\x1d\xd5\x15\x93\xd1\xadC\x18V\xbaO~\xfc\xaf\xce\x88+t\xb0\xf1\x8d;\xbd8(\xca\xc6%\xfcB\xea\x04<\x10#,\x05\xd4\xc9;\x17.\xc3\x13*]\x1crij', &(0x7f0000000540)="82", 0x1) close(r0) 20.392068566s ago: executing program 4 (id=27): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x1b9047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 20.318471645s ago: executing program 4 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000811900000000000000800014850000006d00000095"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 19.517493391s ago: executing program 0 (id=50): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40844) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000100)="c7c714b192734f4cbe56752687ad95589c07db3bb5ede262188fd0f182be8e2d48d68c19b19f109577403d774575fcc351df053985a232978fe9aa0e842673437f4d5e4b44dd619d7398ebb84250d4d23edd2fe11f816644808ef0e729f85e259a841e1bc38a53152120db426ad7d4ff29960825659807fda7fbeb889f930bc234") r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19.491144588s ago: executing program 0 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3f, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x0, 0x1c00}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 19.423289687s ago: executing program 0 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) 19.306060949s ago: executing program 0 (id=56): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6009b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x85, 0x7a5, &(0x7f00000007c0)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 19.205858505s ago: executing program 4 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 19.201963826s ago: executing program 32 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 18.942364327s ago: executing program 0 (id=63): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x2800088, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000280)="c7459f55", 0x4) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 18.376041809s ago: executing program 0 (id=68): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x0, 0xd0, 0x1b8, 0x1b8, 0x0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x400000b2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) 18.375923359s ago: executing program 33 (id=68): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x0, 0xd0, 0x1b8, 0x1b8, 0x0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x400000b2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) 12.216869678s ago: executing program 1 (id=171): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c43, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x1250}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) 11.410141856s ago: executing program 1 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x13c4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x8c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) 6.298812403s ago: executing program 2 (id=250): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x2800088, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000280)="c7459f55", 0x4) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 6.168761858s ago: executing program 6 (id=253): socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r1, 0x0, 0x300}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha3-384\x00\x00\x00\x00\x00'], 0x0, 0x0) 5.981767748s ago: executing program 6 (id=255): r0 = socket$l2tp(0x2, 0x2, 0x73) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 5.464500598s ago: executing program 1 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x13c4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x8c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) 5.338690941s ago: executing program 1 (id=267): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x28008dd, &(0x7f00000003c0)={[{@noblock_validity}, {}, {@noblock_validity}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 5.064495105s ago: executing program 1 (id=258): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.064324585s ago: executing program 2 (id=259): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x37, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.895888221s ago: executing program 2 (id=263): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) fchdir(0xffffffffffffffff) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="7d041816be2cb54fa0aaaa000004424203"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 4.832537348s ago: executing program 6 (id=265): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) preadv(r0, &(0x7f0000001dc0)=[{&(0x7f0000000000)=""/16, 0x10}, {0x0}], 0x2, 0x2, 0x4) 4.783208531s ago: executing program 2 (id=268): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x40000, 0x10120, 0x0, 0x0) 4.648011858s ago: executing program 2 (id=269): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9e}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.622946604s ago: executing program 5 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001100)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) 3.645747617s ago: executing program 1 (id=275): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8a010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={0x0, 0x4}, 0x201, 0xe7e, 0x0, 0x7, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) 3.645548117s ago: executing program 34 (id=275): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8a010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={0x0, 0x4}, 0x201, 0xe7e, 0x0, 0x7, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) 1.773838062s ago: executing program 6 (id=283): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf2c, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffff805}, 0x1c) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 1.773690272s ago: executing program 5 (id=284): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.292130492s ago: executing program 2 (id=289): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {}, {@orlov}, {@nogrpid}, {@delalloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x2000000}, 0x90) 1.291861832s ago: executing program 5 (id=291): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x100, 0x7e}, 0x0, 0x4, 0xfffffffd, 0x1, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x3) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) getsockopt(0xffffffffffffffff, 0xcf6d, 0xc7d3, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 1.133027094s ago: executing program 5 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x6007}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x3ffd, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1}, {0xa000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9}}}}}}}}, 0x36) 1.033722371s ago: executing program 3 (id=295): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}}}}}}}, 0x0) 905.838826ms ago: executing program 7 (id=277): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="010000000000000020", 0x9) 861.097958ms ago: executing program 6 (id=296): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x88000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 845.336022ms ago: executing program 3 (id=297): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)={[{'addr=127.0.0.1'}]}) 652.226284ms ago: executing program 7 (id=298): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 652.115484ms ago: executing program 5 (id=299): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x3, 0x0, &(0x7f0000000280)=[0x6, 0x9, 0x8], 0x2}}, 0x30) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 651.805714ms ago: executing program 3 (id=300): write(0xffffffffffffffff, &(0x7f00000000c0)='$\x00', 0x2) r0 = syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0x6968, 0x10000, 0x1, 0x2ca}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001540)={0x3, 0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/237, 0xed}, {&(0x7f0000001280)=""/39, 0x27}], &(0x7f0000001500)=[0x0, 0x4, 0x3]}, 0x20) r1 = eventfd2(0x9, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001cc0)={0x2, 0x0, &(0x7f0000001c40)=[{0x0}], 0x0, 0x1}, 0x20) 539.200785ms ago: executing program 5 (id=301): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x20001080) 517.399331ms ago: executing program 3 (id=302): setuid(0xee00) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 221.72982ms ago: executing program 3 (id=303): r0 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='\xec\xd2=(L\x9f\x1c&\xb7\x98\f\x87\xcf\xdb\xb4\xdc.\xc1\xec\xa3\x04\xa2\xb8H\xdc#\x06\npr:\x95\xb9\xbf7\xe6Z\x8aX\xbc\x1d\xd5\x15\x93\xd1\xadC\x18V\xbaO~\xfc\xaf\xce\x88+t\xb0\xf1\x8d;\xbd8(\xca\xc6%\xfcB\xea\x04<\x10#,\x05\xd4\xc9;\x17.\xc3\x13*]\x1crij', &(0x7f0000000540)="82", 0x1) close(r0) 178.597532ms ago: executing program 3 (id=304): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x2800088, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000280)="c7459f55", 0x4) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 6 (id=305): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) kernel console output (not intermixed with test programs): [ 22.863078][ T29] audit: type=1400 audit(1790310074.213:124): avc: denied { write } for pid=3265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.895251][ T29] audit: type=1400 audit(1790310074.243:125): avc: denied { write } for pid=3276 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. [ 29.479393][ T29] audit: type=1400 audit(1790310080.833:126): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.479632][ T29] audit: type=1400 audit(1790310080.833:127): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.480118][ T3287] cgroup: Unknown subsys name 'net' [ 29.480359][ T29] audit: type=1400 audit(1790310080.833:128): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.596681][ T3287] cgroup: Unknown subsys name 'cpuset' [ 29.597311][ T3287] cgroup: Unknown subsys name 'rlimit' [ 29.724434][ T29] audit: type=1400 audit(1790310081.073:129): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.725454][ T29] audit: type=1400 audit(1790310081.073:130): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.725544][ T29] audit: type=1400 audit(1790310081.073:131): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.725697][ T29] audit: type=1400 audit(1790310081.073:132): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.730301][ T29] audit: type=1400 audit(1790310081.083:133): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.730396][ T29] audit: type=1400 audit(1790310081.083:134): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.759749][ T29] audit: type=1400 audit(1790310081.113:135): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.800129][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.893395][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.073235][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.073270][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.073379][ T3298] bridge_slave_0: entered allmulticast mode [ 31.073827][ T3298] bridge_slave_0: entered promiscuous mode [ 31.085263][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.085297][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.085421][ T3298] bridge_slave_1: entered allmulticast mode [ 31.085875][ T3298] bridge_slave_1: entered promiscuous mode [ 31.126939][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.148104][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.177303][ T3298] team0: Port device team_slave_0 added [ 31.178398][ T3298] team0: Port device team_slave_1 added [ 31.214152][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.214178][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.214204][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.237707][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.237722][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.237823][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.265196][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.265279][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.265375][ T3305] bridge_slave_0: entered allmulticast mode [ 31.265927][ T3305] bridge_slave_0: entered promiscuous mode [ 31.275853][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.275886][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.275938][ T3305] bridge_slave_1: entered allmulticast mode [ 31.276666][ T3305] bridge_slave_1: entered promiscuous mode [ 31.333817][ T3298] hsr_slave_0: entered promiscuous mode [ 31.334220][ T3298] hsr_slave_1: entered promiscuous mode [ 31.334649][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.334680][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.334757][ T3304] bridge_slave_0: entered allmulticast mode [ 31.335171][ T3304] bridge_slave_0: entered promiscuous mode [ 31.336089][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.336120][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.336191][ T3297] bridge_slave_0: entered allmulticast mode [ 31.336699][ T3297] bridge_slave_0: entered promiscuous mode [ 31.338902][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.344381][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.344413][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.344515][ T3297] bridge_slave_1: entered allmulticast mode [ 31.345041][ T3297] bridge_slave_1: entered promiscuous mode [ 31.352024][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.357577][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.357609][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.357666][ T3304] bridge_slave_1: entered allmulticast mode [ 31.358172][ T3304] bridge_slave_1: entered promiscuous mode [ 31.363557][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.363590][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.363646][ T3301] bridge_slave_0: entered allmulticast mode [ 31.364282][ T3301] bridge_slave_0: entered promiscuous mode [ 31.365422][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.365449][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.365563][ T3301] bridge_slave_1: entered allmulticast mode [ 31.366143][ T3301] bridge_slave_1: entered promiscuous mode [ 31.398054][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.399320][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.400632][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.401482][ T3305] team0: Port device team_slave_0 added [ 31.402428][ T3305] team0: Port device team_slave_1 added [ 31.403414][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.404391][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.415697][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.436944][ T3304] team0: Port device team_slave_0 added [ 31.447200][ T3304] team0: Port device team_slave_1 added [ 31.447852][ T3297] team0: Port device team_slave_0 added [ 31.448207][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.448220][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.448313][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.448964][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.449026][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.449051][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.452740][ T3297] team0: Port device team_slave_1 added [ 31.462655][ T3301] team0: Port device team_slave_0 added [ 31.463755][ T3301] team0: Port device team_slave_1 added [ 31.500001][ T3305] hsr_slave_0: entered promiscuous mode [ 31.500903][ T3305] hsr_slave_1: entered promiscuous mode [ 31.501118][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 31.501132][ T3305] Cannot create hsr debugfs directory [ 31.501526][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.501538][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.501573][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.502120][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.502132][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.502213][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.524554][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.524576][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.524604][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.525199][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.525212][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.525238][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.533142][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.533156][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.533258][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.533937][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.533958][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.533984][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.588872][ T3304] hsr_slave_0: entered promiscuous mode [ 31.589371][ T3304] hsr_slave_1: entered promiscuous mode [ 31.589600][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 31.589614][ T3304] Cannot create hsr debugfs directory [ 31.612087][ T3297] hsr_slave_0: entered promiscuous mode [ 31.612488][ T3297] hsr_slave_1: entered promiscuous mode [ 31.612747][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 31.612762][ T3297] Cannot create hsr debugfs directory [ 31.658971][ T3301] hsr_slave_0: entered promiscuous mode [ 31.659435][ T3301] hsr_slave_1: entered promiscuous mode [ 31.659638][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 31.659654][ T3301] Cannot create hsr debugfs directory [ 31.717480][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.725121][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.748681][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.753605][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.775267][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.798355][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.799004][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.809550][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.905654][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.932274][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.939429][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.939479][ T3298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.939564][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.939629][ T3298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.940677][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.942729][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.943370][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.949889][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.962121][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.977517][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.994680][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.021286][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.027056][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.031673][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.038653][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.043172][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.054010][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.059782][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.264398][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.269184][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.280474][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.283616][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.315495][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.318618][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.319266][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.326916][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.334175][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.340383][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.342553][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.348057][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.356206][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.358291][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.361354][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.374008][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.375733][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.427681][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.430324][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.432193][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.437648][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.437682][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.450238][ T3298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.450332][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.471410][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.471447][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.492107][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.516266][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.526369][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.526409][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.528670][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.535857][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.535898][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.546805][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.546839][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.591857][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.617602][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.617642][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.642897][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.642934][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.655013][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.673490][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.674498][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.681684][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.703678][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.703714][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.709923][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.709956][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.722132][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.722167][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.730745][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.730781][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.789825][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.806421][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.993639][ T3305] veth0_vlan: entered promiscuous mode [ 32.997106][ T3305] veth1_vlan: entered promiscuous mode [ 33.008033][ T3305] veth0_macvtap: entered promiscuous mode [ 33.009674][ T3305] veth1_macvtap: entered promiscuous mode [ 33.015252][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.040731][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.055101][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.075391][ T3298] veth0_vlan: entered promiscuous mode [ 33.092033][ T3298] veth1_vlan: entered promiscuous mode [ 33.116316][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.125596][ T3298] veth0_macvtap: entered promiscuous mode [ 33.132398][ T3298] veth1_macvtap: entered promiscuous mode [ 33.147391][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.148156][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.148318][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.148356][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.151093][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.159933][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.162130][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.168799][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.168843][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.169113][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.169216][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.269688][ T3305] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.318472][ T3499] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 33.371103][ T3301] veth0_vlan: entered promiscuous mode [ 33.372661][ T3503] netlink: 'syz.3.4': attribute type 7 has an invalid length. [ 33.376413][ T3503] netlink: 'syz.3.4': attribute type 7 has an invalid length. [ 33.376536][ T3503] Zero length message leads to an empty skb [ 33.381288][ T3301] veth1_vlan: entered promiscuous mode [ 33.388388][ T3297] veth0_vlan: entered promiscuous mode [ 33.402082][ T3297] veth1_vlan: entered promiscuous mode [ 33.411771][ T3503] syz.3.4 (3503) used greatest stack depth: 10920 bytes left [ 33.449751][ T3301] veth0_macvtap: entered promiscuous mode [ 33.465408][ T3297] veth0_macvtap: entered promiscuous mode [ 33.473337][ T3301] veth1_macvtap: entered promiscuous mode [ 33.475466][ T3297] veth1_macvtap: entered promiscuous mode [ 33.499469][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.513820][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.540069][ T3519] FAULT_INJECTION: forcing a failure. [ 33.540069][ T3519] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 33.540184][ T3519] CPU: 1 UID: 0 PID: 3519 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(lazy) [ 33.540270][ T3519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.540283][ T3519] Call Trace: [ 33.540290][ T3519] [ 33.540298][ T3519] __dump_stack+0x1d/0x30 [ 33.540341][ T3519] dump_stack_lvl+0x95/0xd0 [ 33.540379][ T3519] dump_stack+0x15/0x1b [ 33.540405][ T3519] should_fail_ex+0x262/0x280 [ 33.540431][ T3519] should_fail_alloc_page+0xf2/0x100 [ 33.540483][ T3519] __alloc_frozen_pages_noprof+0x157/0x400 [ 33.540524][ T3519] alloc_pages_mpol+0xaf/0x1d0 [ 33.540555][ T3519] folio_alloc_mpol_noprof+0x39/0x80 [ 33.540583][ T3519] shmem_get_folio_gfp+0x3ff/0xd90 [ 33.540614][ T3519] ? filemap_map_pages+0xe96/0xf70 [ 33.540664][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.540647][ T3519] shmem_fault+0xf6/0x250 [ 33.540698][ T3519] handle_mm_fault+0x2310/0x3bb0 [ 33.540798][ T3519] __get_user_pages+0x12e9/0x1eb0 [ 33.540825][ T3519] __mm_populate+0x242/0x390 [ 33.540892][ T3519] vm_mmap_pgoff+0x23b/0x2d0 [ 33.540920][ T3519] ksys_mmap_pgoff+0xc1/0x310 [ 33.540949][ T3519] ? __x64_sys_mmap+0x49/0x70 [ 33.540980][ T3519] x64_sys_call+0x23b3/0x2550 [ 33.541059][ T3519] do_syscall_64+0x112/0x360 [ 33.541084][ T3519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.541167][ T3519] RIP: 0033:0x7fc905ece159 [ 33.541188][ T3519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.541238][ T3519] RSP: 002b:00007fc904927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 33.541264][ T3519] RAX: ffffffffffffffda RBX: 00007fc906155fa0 RCX: 00007fc905ece159 [ 33.541279][ T3519] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 33.541293][ T3519] RBP: 00007fc905f6506b R08: ffffffffffffffff R09: 0000000000000000 [ 33.541308][ T3519] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 33.541324][ T3519] R13: 00007fc906156038 R14: 00007fc906155fa0 R15: 00007ffd1fce9128 [ 33.541345][ T3519] [ 33.596880][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.613469][ T3521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.614517][ T3521] bridge0: port 3(bond1) entered blocking state [ 33.614547][ T3521] bridge0: port 3(bond1) entered disabled state [ 33.614718][ T3521] bond1: entered allmulticast mode [ 33.619450][ T3521] bond1: entered promiscuous mode [ 33.619843][ T3521] bridge0: port 3(bond1) entered blocking state [ 33.619880][ T3521] bridge0: port 3(bond1) entered forwarding state [ 33.626401][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.626445][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.626613][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.638161][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.689788][ T41] bridge0: port 3(bond1) entered disabled state [ 33.698542][ T3304] veth0_vlan: entered promiscuous mode [ 33.701811][ T3304] veth1_vlan: entered promiscuous mode [ 33.747665][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.747884][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.748081][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.748217][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.812103][ T3304] veth0_macvtap: entered promiscuous mode [ 33.854783][ T3304] veth1_macvtap: entered promiscuous mode [ 33.935842][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.948692][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.075128][ T3541] loop2: detected capacity change from 0 to 2048 [ 34.091218][ T3541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.117315][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.117773][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.117996][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.118385][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.180909][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.334213][ T3562] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 34.427445][ T3568] ======================================================= [ 34.427445][ T3568] WARNING: The mand mount option has been deprecated and [ 34.427445][ T3568] and is ignored by this kernel. Remove the mand [ 34.427445][ T3568] option from the mount to silence this warning. [ 34.427445][ T3568] ======================================================= [ 34.436442][ T3562] syz.1.24 (3562) used greatest stack depth: 10600 bytes left [ 34.504770][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 34.504788][ T29] audit: type=1400 audit(1790310085.853:192): avc: denied { setopt } for pid=3572 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.505404][ T29] audit: type=1400 audit(1790310085.853:193): avc: denied { block_suspend } for pid=3572 comm="syz.2.30" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.625264][ T29] audit: type=1400 audit(1790310085.973:194): avc: denied { create } for pid=3585 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.626153][ T29] audit: type=1400 audit(1790310085.973:195): avc: denied { connect } for pid=3585 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.627631][ T29] audit: type=1400 audit(1790310085.973:196): avc: denied { ioctl } for pid=3585 comm="syz.2.36" path="socket:[4720]" dev="sockfs" ino=4720 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.671052][ T29] audit: type=1400 audit(1790310086.023:197): avc: denied { read write } for pid=3585 comm="syz.2.36" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.671153][ T29] audit: type=1400 audit(1790310086.023:198): avc: denied { open } for pid=3585 comm="syz.2.36" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.673924][ T29] audit: type=1400 audit(1790310086.023:199): avc: denied { ioctl } for pid=3585 comm="syz.2.36" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.772644][ T29] audit: type=1400 audit(1790310086.123:200): avc: denied { ioctl } for pid=3588 comm="syz.1.38" path="socket:[4724]" dev="sockfs" ino=4724 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.811457][ T29] audit: type=1400 audit(1790310086.163:201): avc: denied { name_bind } for pid=3592 comm="syz.2.39" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.865204][ T3599] loop0: detected capacity change from 0 to 256 [ 34.869055][ T3600] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 34.869080][ T3600] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 34.869183][ T3600] vhci_hcd vhci_hcd.0: Device attached [ 34.899274][ T3600] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 34.899304][ T3600] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 34.899336][ T3600] vhci_hcd vhci_hcd.0: Device attached [ 34.905176][ T3600] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 34.905205][ T3600] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 34.905245][ T3600] vhci_hcd vhci_hcd.0: Device attached [ 34.950471][ T3600] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 34.950502][ T3600] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 34.950533][ T3600] vhci_hcd vhci_hcd.0: Device attached [ 34.980294][ T3600] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 34.980324][ T3600] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 34.980355][ T3600] vhci_hcd vhci_hcd.0: Device attached [ 34.983822][ T3600] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 34.983850][ T3600] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 34.983886][ T3600] vhci_hcd vhci_hcd.0: Device attached [ 34.984569][ T3618] syz.3.44 uses obsolete (PF_INET,SOCK_PACKET) [ 34.994503][ T3608] vhci_hcd: connection closed [ 34.994590][ T3601] vhci_hcd: connection closed [ 34.995225][ T3603] vhci_hcd: connection closed [ 34.997920][ T3613] vhci_hcd: connection closed [ 35.000445][ T3616] vhci_hcd: connection closed [ 35.001093][ T3606] vhci_hcd: connection closed [ 35.007772][ T70] vhci_hcd vhci_hcd.1: stop threads [ 35.007799][ T70] vhci_hcd vhci_hcd.1: release socket [ 35.007821][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 35.009568][ T70] vhci_hcd vhci_hcd.1: stop threads [ 35.009584][ T70] vhci_hcd vhci_hcd.1: release socket [ 35.009604][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 35.014418][ T70] vhci_hcd vhci_hcd.1: stop threads [ 35.014462][ T70] vhci_hcd vhci_hcd.1: release socket [ 35.014486][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 35.014594][ T70] vhci_hcd vhci_hcd.1: stop threads [ 35.014624][ T70] vhci_hcd vhci_hcd.1: release socket [ 35.014643][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 35.014743][ T70] vhci_hcd vhci_hcd.1: stop threads [ 35.014758][ T70] vhci_hcd vhci_hcd.1: release socket [ 35.014772][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 35.023001][ T70] vhci_hcd vhci_hcd.1: stop threads [ 35.023027][ T70] vhci_hcd vhci_hcd.1: release socket [ 35.023049][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 35.034320][ T3620] netlink: 'syz.2.45': attribute type 12 has an invalid length. [ 35.067584][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 35.192642][ T3624] process 'syz.0.46' launched './file0' with NULL argv: empty string added [ 35.192882][ T3624] Invalid argument reading file caps for ./file0 [ 35.257429][ T3628] xt_hashlimit: size too large, truncated to 1048576 [ 35.384843][ T3638] FAULT_INJECTION: forcing a failure. [ 35.384843][ T3638] name fail_futex, interval 1, probability 0, space 0, times 1 [ 35.384959][ T3638] CPU: 0 UID: 0 PID: 3638 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(lazy) [ 35.384989][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.385004][ T3638] Call Trace: [ 35.385014][ T3638] [ 35.385024][ T3638] __dump_stack+0x1d/0x30 [ 35.385064][ T3638] dump_stack_lvl+0x95/0xd0 [ 35.385091][ T3638] dump_stack+0x15/0x1b [ 35.385131][ T3638] should_fail_ex+0x262/0x280 [ 35.385233][ T3638] should_fail+0xb/0x20 [ 35.385263][ T3638] get_futex_key+0x82d/0xb10 [ 35.385300][ T3638] futex_wait_requeue_pi+0x160/0x6e0 [ 35.385344][ T3638] ? __pfx_futex_wake_mark+0x10/0x10 [ 35.385468][ T3638] do_futex+0x146/0x460 [ 35.385500][ T3638] ? fdget+0x104/0x110 [ 35.385556][ T3638] __se_sys_futex+0x2f6/0x370 [ 35.385636][ T3638] ? xfd_validate_state+0x45/0xf0 [ 35.385672][ T3638] __x64_sys_futex+0x78/0x90 [ 35.385707][ T3638] x64_sys_call+0x22e2/0x2550 [ 35.385806][ T3638] do_syscall_64+0x112/0x360 [ 35.385832][ T3638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.385859][ T3638] RIP: 0033:0x7fc905ece159 [ 35.385880][ T3638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.385911][ T3638] RSP: 002b:00007fc904927028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 35.385947][ T3638] RAX: ffffffffffffffda RBX: 00007fc906155fa0 RCX: 00007fc905ece159 [ 35.385964][ T3638] RDX: 0000000000000004 RSI: 000080000000000b RDI: 0000000000000000 [ 35.386061][ T3638] RBP: 00007fc905f6506b R08: 0000200000048000 R09: 0000000000000000 [ 35.386078][ T3638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.386093][ T3638] R13: 00007fc906156038 R14: 00007fc906155fa0 R15: 00007ffd1fce9128 [ 35.386186][ T3638] [ 35.433452][ T3640] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.53'. [ 35.599235][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.606848][ T3649] tls_set_device_offload_rx: netdev not found [ 35.658795][ T3646] loop0: detected capacity change from 0 to 2048 [ 35.683733][ T3646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.719730][ T3659] loop1: detected capacity change from 0 to 1024 [ 35.723907][ T3659] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.726150][ T3659] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 35.726656][ T3659] EXT4-fs (loop1): orphan cleanup on readonly fs [ 35.731319][ T3659] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.61: Freeing blocks not in datazone - block = 0, count = 4096 [ 35.731414][ T3659] loop1: lost filesystem error report for type 5 error -117 [ 35.731676][ T3659] EXT4-fs (loop1): 1 orphan inode deleted [ 35.732174][ T3659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.746146][ T3646] loop0: detected capacity change from 2048 to 64 [ 35.804652][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.994585][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.994611][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.994726][ T3656] bridge_slave_0: entered allmulticast mode [ 35.995310][ T3656] bridge_slave_0: entered promiscuous mode [ 35.996337][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.996368][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.996446][ T3656] bridge_slave_1: entered allmulticast mode [ 35.996964][ T3656] bridge_slave_1: entered promiscuous mode [ 36.008675][ T3656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.009846][ T3656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.020319][ T3656] team0: Port device team_slave_0 added [ 36.021341][ T3656] team0: Port device team_slave_1 added [ 36.030770][ T3656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.030784][ T3656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.030874][ T3656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.031590][ T3656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.031602][ T3656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.031629][ T3656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.049089][ T3656] hsr_slave_0: entered promiscuous mode [ 36.049566][ T3656] hsr_slave_1: entered promiscuous mode [ 36.049790][ T3656] debugfs: 'hsr0' already exists in 'hsr' [ 36.049804][ T3656] Cannot create hsr debugfs directory [ 36.106147][ T3655] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 36.226953][ T3656] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.228935][ T3656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.229792][ T3656] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.231729][ T3656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.232352][ T3656] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.234272][ T3656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.234813][ T3656] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.237448][ T3656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.279847][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.287899][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.310586][ T3656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.317056][ T3656] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.320234][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.320270][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.324112][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.324169][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.363796][ T3653] kmmpd-loop0: attempt to access beyond end of device [ 36.363796][ T3653] loop0: rw=8402945, sector=256, nr_sectors = 4 limit=64 [ 36.363832][ T3653] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 36.447728][ T3701] loop3: detected capacity change from 0 to 512 [ 36.499298][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.540849][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.554949][ T3656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.621196][ T31] bridge_slave_1: left allmulticast mode [ 36.621222][ T31] bridge_slave_1: left promiscuous mode [ 36.621411][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.623854][ T31] bridge_slave_0: left allmulticast mode [ 36.623877][ T31] bridge_slave_0: left promiscuous mode [ 36.624016][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.711084][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.712791][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.713631][ T31] bond0 (unregistering): Released all slaves [ 36.777867][ T31] hsr_slave_0: left promiscuous mode [ 36.780385][ T31] hsr_slave_1: left promiscuous mode [ 36.780816][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.780833][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.781278][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.781293][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.822558][ T3746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.822710][ T3746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.838089][ T31] veth1_macvtap: left promiscuous mode [ 36.838120][ T31] veth0_macvtap: left promiscuous mode [ 36.838203][ T31] veth1_vlan: left promiscuous mode [ 36.838242][ T31] veth0_vlan: left promiscuous mode [ 36.905751][ T31] team0 (unregistering): Port device team_slave_1 removed [ 36.913649][ T31] team0 (unregistering): Port device team_slave_0 removed [ 36.941344][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.066027][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.066067][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.066126][ T3704] bridge_slave_0: entered allmulticast mode [ 37.067058][ T3704] bridge_slave_0: entered promiscuous mode [ 37.070746][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.070780][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.070870][ T3704] bridge_slave_1: entered allmulticast mode [ 37.072763][ T3704] bridge_slave_1: entered promiscuous mode [ 37.106429][ T3704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.108482][ T3704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.142229][ T3704] team0: Port device team_slave_0 added [ 37.143108][ T3704] team0: Port device team_slave_1 added [ 37.172205][ T3704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.172222][ T3704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.172315][ T3704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.172781][ T3704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.172792][ T3704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.172862][ T3704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.185400][ T3656] veth0_vlan: entered promiscuous mode [ 37.211833][ T3656] veth1_vlan: entered promiscuous mode [ 37.225845][ T3704] hsr_slave_0: entered promiscuous mode [ 37.226346][ T3704] hsr_slave_1: entered promiscuous mode [ 37.226656][ T3704] debugfs: 'hsr0' already exists in 'hsr' [ 37.226671][ T3704] Cannot create hsr debugfs directory [ 37.231682][ T3656] veth0_macvtap: entered promiscuous mode [ 37.233912][ T3656] veth1_macvtap: entered promiscuous mode [ 37.245382][ T3656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.262738][ T3656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.316128][ T3446] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.316317][ T3446] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.316433][ T3446] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.316497][ T3446] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.367284][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.373687][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 37.391792][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 37.431978][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.454010][ T3704] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 37.466599][ T3704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.469095][ T3704] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 37.475318][ T3704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.497011][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.513485][ T3704] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 37.523901][ T3704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.526316][ T3704] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 37.535853][ T3704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.554195][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.628683][ T3704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.696608][ T31] bridge_slave_1: left allmulticast mode [ 37.696630][ T31] bridge_slave_1: left promiscuous mode [ 37.696741][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.699774][ T31] bridge_slave_0: left allmulticast mode [ 37.699794][ T31] bridge_slave_0: left promiscuous mode [ 37.699967][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.790752][ T3815] netlink: 'syz.3.81': attribute type 10 has an invalid length. [ 37.808612][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.809869][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.810635][ T31] bond0 (unregistering): Released all slaves [ 37.814246][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 37.815549][ T3815] syz_tun: entered promiscuous mode [ 37.819552][ T3815] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 37.826525][ T3815] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.827100][ T3815] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 37.830811][ T3704] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.833376][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.833410][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.836338][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.836370][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.878329][ T3704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.878353][ T3704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.943658][ T31] hsr_slave_0: left promiscuous mode [ 37.944982][ T31] hsr_slave_1: left promiscuous mode [ 37.945378][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.945394][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.945898][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.945911][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.988818][ T31] veth1_macvtap: left promiscuous mode [ 37.988847][ T31] veth0_macvtap: left promiscuous mode [ 37.988885][ T31] veth1_vlan: left promiscuous mode [ 37.988915][ T31] veth0_vlan: left promiscuous mode [ 38.075292][ T31] team0 (unregistering): Port device team_slave_1 removed [ 38.083736][ T31] team0 (unregistering): Port device team_slave_0 removed [ 38.109229][ T3827] bridge0: port 3(gretap0) entered blocking state [ 38.109260][ T3827] bridge0: port 3(gretap0) entered disabled state [ 38.109314][ T3827] gretap0: entered allmulticast mode [ 38.109743][ T3827] gretap0: entered promiscuous mode [ 38.109905][ T3827] bridge0: port 3(gretap0) entered blocking state [ 38.109981][ T3827] bridge0: port 3(gretap0) entered forwarding state [ 38.111374][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 38.134303][ T3820] bridge0: port 4(erspan0) entered blocking state [ 38.134338][ T3820] bridge0: port 4(erspan0) entered disabled state [ 38.134426][ T3820] erspan0: entered allmulticast mode [ 38.134904][ T3820] erspan0: entered promiscuous mode [ 38.135048][ T3820] bridge0: port 4(erspan0) entered blocking state [ 38.135076][ T3820] bridge0: port 4(erspan0) entered forwarding state [ 38.220858][ T3351] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.221265][ T3351] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.317354][ T3851] fido_id[3851]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.385310][ T3704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.420498][ T3865] FAULT_INJECTION: forcing a failure. [ 38.420498][ T3865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 38.420533][ T3865] CPU: 1 UID: 0 PID: 3865 Comm: syz.3.87 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.420562][ T3865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.420577][ T3865] Call Trace: [ 38.420585][ T3865] [ 38.420641][ T3865] __dump_stack+0x1d/0x30 [ 38.420741][ T3865] dump_stack_lvl+0x95/0xd0 [ 38.420764][ T3865] dump_stack+0x15/0x1b [ 38.420784][ T3865] should_fail_ex+0x262/0x280 [ 38.420812][ T3865] should_fail_alloc_page+0xf2/0x100 [ 38.420843][ T3865] __alloc_frozen_pages_noprof+0x157/0x400 [ 38.420913][ T3865] alloc_pages_mpol+0xaf/0x1d0 [ 38.420998][ T3865] folio_alloc_mpol_noprof+0x39/0x80 [ 38.421049][ T3865] shmem_get_folio_gfp+0x3ff/0xd90 [ 38.421162][ T3865] shmem_fallocate+0x631/0x8d0 [ 38.421263][ T3865] vfs_fallocate+0x3ac/0x400 [ 38.421367][ T3865] __x64_sys_fallocate+0x7a/0xd0 [ 38.421407][ T3865] x64_sys_call+0x1e1d/0x2550 [ 38.421568][ T3865] do_syscall_64+0x112/0x360 [ 38.421594][ T3865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.421622][ T3865] RIP: 0033:0x7f580486e159 [ 38.421642][ T3865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.421664][ T3865] RSP: 002b:00007f58032c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 38.421688][ T3865] RAX: ffffffffffffffda RBX: 00007f5804af5fa0 RCX: 00007f580486e159 [ 38.421786][ T3865] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 38.421802][ T3865] RBP: 00007f580490506b R08: 0000000000000000 R09: 0000000000000000 [ 38.421892][ T3865] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 38.421905][ T3865] R13: 00007f5804af6038 R14: 00007f5804af5fa0 R15: 00007fff1bcc47a8 [ 38.421922][ T3865] [ 38.575679][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 38.732505][ T3905] FAULT_INJECTION: forcing a failure. [ 38.732505][ T3905] name failslab, interval 1, probability 0, space 0, times 1 [ 38.732653][ T3905] CPU: 1 UID: 0 PID: 3905 Comm: syz.1.97 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.732682][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.732701][ T3905] Call Trace: [ 38.732709][ T3905] [ 38.732717][ T3905] __dump_stack+0x1d/0x30 [ 38.732743][ T3905] dump_stack_lvl+0x95/0xd0 [ 38.732831][ T3905] dump_stack+0x15/0x1b [ 38.732856][ T3905] should_fail_ex+0x262/0x280 [ 38.732885][ T3905] ? sctp_add_bind_addr+0x71/0x1e0 [ 38.732916][ T3905] should_failslab+0x8c/0xb0 [ 38.732961][ T3905] __kmalloc_cache_noprof+0x7a/0x400 [ 38.733032][ T3905] ? sctp_add_bind_addr+0x71/0x1e0 [ 38.733065][ T3905] sctp_add_bind_addr+0x71/0x1e0 [ 38.733134][ T3905] sctp_do_bind+0x420/0x4b0 [ 38.733271][ T3905] sctp_connect_new_asoc+0x153/0x3a0 [ 38.733313][ T3905] sctp_sendmsg+0x105f/0x1d00 [ 38.733429][ T3905] ? __pfx_sctp_sendmsg+0x10/0x10 [ 38.733510][ T3905] inet_sendmsg+0xc5/0xd0 [ 38.733602][ T3905] ? __pfx_inet_sendmsg+0x10/0x10 [ 38.733632][ T3905] ____sys_sendmsg+0x4e8/0x580 [ 38.733661][ T3905] ___sys_sendmsg+0x195/0x1e0 [ 38.733770][ T3905] __sys_sendmmsg+0x185/0x320 [ 38.733802][ T3905] __x64_sys_sendmmsg+0x57/0x70 [ 38.733899][ T3905] x64_sys_call+0x1fb4/0x2550 [ 38.733995][ T3905] do_syscall_64+0x112/0x360 [ 38.734021][ T3905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.734046][ T3905] RIP: 0033:0x7fd9d409e159 [ 38.734065][ T3905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.734087][ T3905] RSP: 002b:00007fd9d2af7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 38.734165][ T3905] RAX: ffffffffffffffda RBX: 00007fd9d4325fa0 RCX: 00007fd9d409e159 [ 38.734182][ T3905] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 38.734195][ T3905] RBP: 00007fd9d413506b R08: 0000000000000000 R09: 0000000000000000 [ 38.734207][ T3905] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.734277][ T3905] R13: 00007fd9d4326038 R14: 00007fd9d4325fa0 R15: 00007ffed4f1b108 [ 38.734295][ T3905] [ 38.809608][ T3910] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 38.809699][ T3910] SELinux: failed to load policy [ 38.910612][ T3918] loop5: detected capacity change from 0 to 164 [ 38.935389][ T3918] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 39.060465][ T3704] veth0_vlan: entered promiscuous mode [ 39.078381][ T3704] veth1_vlan: entered promiscuous mode [ 39.121098][ T3704] veth0_macvtap: entered promiscuous mode [ 39.127955][ T3704] veth1_macvtap: entered promiscuous mode [ 39.149658][ T3704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.167558][ T3704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.206060][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.206354][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.206396][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.206464][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.212988][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 39.240259][ T3946] netlink: 144 bytes leftover after parsing attributes in process `syz.1.106'. [ 39.360441][ T3963] loop6: detected capacity change from 0 to 512 [ 39.363760][ T3963] EXT4-fs: inline encryption not supported [ 39.383611][ T3963] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.383628][ T3963] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 39.383643][ T3963] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.383660][ T3963] EXT4-fs (loop6): The Hurd can't support 64-bit file systems [ 39.426383][ T3953] 9pnet: p9_errstr2errno: server reported unknown error pt,da [ 39.491374][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 39.582572][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 39.582591][ T29] audit: type=1400 audit(1790310090.933:281): avc: denied { ioctl } for pid=3989 comm="syz.6.114" path="socket:[7516]" dev="sockfs" ino=7516 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.689954][ T4003] loop6: detected capacity change from 0 to 128 [ 39.692897][ T29] audit: type=1400 audit(1790310091.043:282): avc: denied { write } for pid=3985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.727219][ T4003] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.729453][ T4003] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.732825][ T29] audit: type=1400 audit(1790310091.083:283): avc: denied { write } for pid=4002 comm="syz.6.118" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.732924][ T29] audit: type=1400 audit(1790310091.083:284): avc: denied { read } for pid=4002 comm="syz.6.118" path="/3/file1/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.735172][ T29] audit: type=1400 audit(1790310091.083:285): avc: denied { map } for pid=4002 comm="syz.6.118" path="/3/file1/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.735236][ T29] audit: type=1400 audit(1790310091.083:286): avc: denied { execute } for pid=4002 comm="syz.6.118" path="/3/file1/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.826783][ T29] audit: type=1400 audit(1790310091.173:287): avc: denied { write } for pid=4012 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.869330][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 39.949543][ T29] audit: type=1400 audit(1790310091.303:288): avc: denied { perfmon } for pid=4019 comm="syz.5.122" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.954568][ T29] audit: type=1400 audit(1790310091.303:289): avc: denied { bpf } for pid=4019 comm="syz.5.122" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.050868][ T3704] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.050984][ T29] audit: type=1400 audit(1790310091.403:290): avc: denied { create } for pid=4025 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.099775][ T4034] loop6: detected capacity change from 0 to 512 [ 40.103829][ T4034] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.124: invalid indirect mapped block 256 (level 2) [ 40.103862][ T4034] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.104485][ T4034] EXT4-fs (loop6): 2 truncates cleaned up [ 40.104987][ T4034] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.381389][ T3704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 40.427141][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.452188][ T3403] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0002/input/input5 [ 40.454499][ T3403] hid-generic 0005:0009:0040.0002: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 40.512471][ T4053] fido_id[4053]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.829668][ T4087] netlink: 84 bytes leftover after parsing attributes in process `syz.5.144'. [ 40.877666][ T4090] loop1: detected capacity change from 0 to 512 [ 40.893128][ T4090] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.145: bad orphan inode 15 [ 40.893306][ T4090] loop1: lost filesystem error report for type 5 error -117 [ 40.893399][ T4090] ext4_test_bit(bit=14, block=5) = 0 [ 40.893872][ T4090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.072753][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.244035][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8e4600: rx timeout, send abort [ 41.580277][ T4120] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 41.587916][ T4123] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.588033][ T4123] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.745984][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8e4200: rx timeout, send abort [ 41.747613][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8e4600: abort rx timeout. Force session deactivation [ 42.050598][ T4142] capability: warning: `syz.6.164' uses deprecated v2 capabilities in a way that may be insecure [ 42.247035][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a8e4200: abort rx timeout. Force session deactivation [ 42.314187][ T4148] loop1: detected capacity change from 0 to 256 [ 42.449835][ T3739] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.466157][ T4152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'. [ 42.466197][ T4152] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 43.388129][ T313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.608884][ T4157] syz.3.172 (4157) used greatest stack depth: 10592 bytes left [ 43.626241][ T313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.777635][ T4127] loop5: detected capacity change from 0 to 1024 [ 43.836926][ T4127] EXT4-fs: Ignoring removed orlov option [ 43.877136][ T313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.900000][ T4195] [ 43.908950][ T313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.040817][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 44.087829][ T4127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.151647][ T4198] syz.2.184 (4198) used greatest stack depth: 10320 bytes left [ 44.369939][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.408559][ T313] erspan0: left allmulticast mode [ 44.408584][ T313] erspan0: left promiscuous mode [ 44.408765][ T313] bridge0: port 4(erspan0) entered disabled state [ 44.411253][ T313] gretap0: left allmulticast mode [ 44.411276][ T313] gretap0: left promiscuous mode [ 44.411417][ T313] bridge0: port 3(gretap0) entered disabled state [ 44.413040][ T313] bridge_slave_1: left allmulticast mode [ 44.413128][ T313] bridge_slave_1: left promiscuous mode [ 44.413252][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.414053][ T313] bridge_slave_0: left allmulticast mode [ 44.414149][ T313] bridge_slave_0: left promiscuous mode [ 44.414307][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.463817][ T4230] loop5: detected capacity change from 0 to 1024 [ 44.474380][ T4232] Invalid argument reading file caps for ./file0 [ 44.497674][ T4230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.576797][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.611726][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 44.611744][ T29] audit: type=1400 audit(1790310095.963:357): avc: denied { ioctl } for pid=4246 comm="syz.6.199" path="socket:[7974]" dev="sockfs" ino=7974 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.641552][ T29] audit: type=1400 audit(1790310095.993:358): avc: denied { write } for pid=4235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.670321][ T29] audit: type=1400 audit(1790310096.023:359): avc: denied { write } for pid=4252 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.726602][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.729503][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.730589][ T313] bond0 (unregistering): Released all slaves [ 44.732717][ T29] audit: type=1400 audit(1790310096.073:360): avc: denied { write } for pid=4253 comm="syz.5.200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.794409][ T4261] loop2: detected capacity change from 0 to 512 [ 44.802789][ T4247] batman_adv: batadv0: Adding interface: macsec1 [ 44.802805][ T4247] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.802876][ T4247] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 44.803382][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 44.803469][ T29] audit: type=1400 audit(1790310096.153:361): avc: denied { mount } for pid=4262 comm="syz.5.203" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 44.809901][ T29] audit: type=1400 audit(1790310096.163:362): avc: denied { write } for pid=4262 comm="syz.5.203" name="instances" dev="tracefs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.809942][ T29] audit: type=1400 audit(1790310096.163:363): avc: denied { add_name } for pid=4262 comm="syz.5.203" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.809964][ T29] audit: type=1400 audit(1790310096.163:364): avc: denied { create } for pid=4262 comm="syz.5.203" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 44.817975][ T4261] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 44.818072][ T4261] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.818110][ T4261] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 44.818137][ T4261] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 44.818152][ T4261] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.202: bad orphan inode 768 [ 44.818172][ T4261] loop2: lost filesystem error report for type 5 error -117 [ 44.820878][ T4261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.886097][ T29] audit: type=1400 audit(1790310096.233:365): avc: denied { write } for pid=4262 comm="syz.5.203" name="instances" dev="tracefs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.886132][ T29] audit: type=1400 audit(1790310096.233:366): avc: denied { remove_name } for pid=4262 comm="syz.5.203" name="foo" dev="tracefs" ino=7099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.950036][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.950071][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.950117][ T4172] bridge_slave_0: entered allmulticast mode [ 44.959925][ T4261] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 44.960160][ T4172] bridge_slave_0: entered promiscuous mode [ 45.001034][ T313] hsr_slave_0: left promiscuous mode [ 45.014404][ T313] hsr_slave_1: left promiscuous mode [ 45.014812][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.014904][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.036393][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.036411][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.075341][ T313] veth1_macvtap: left promiscuous mode [ 45.075387][ T313] veth0_macvtap: left promiscuous mode [ 45.075506][ T313] veth1_vlan: left promiscuous mode [ 45.075541][ T313] veth0_vlan: left promiscuous mode [ 45.172113][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.204672][ T4278] loop2: detected capacity change from 0 to 512 [ 45.244582][ T4278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.244757][ T4278] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.269943][ T4278] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.208: corrupted xattr block 6: invalid header [ 45.270261][ T4278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 45.270291][ T4278] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.208: corrupted xattr block 6: invalid header [ 45.270794][ T313] team0 (unregistering): Port device team_slave_1 removed [ 45.273452][ T4278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 45.274034][ T4278] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.208: corrupted xattr block 6: invalid header [ 45.274215][ T4278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 45.274248][ T4278] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.208: corrupted xattr block 6: invalid header [ 45.274478][ T4278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 45.274545][ T4278] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.208: corrupted xattr block 6: invalid header [ 45.274774][ T4278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 45.274918][ T4278] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.208: corrupted xattr block 6: invalid header [ 45.275062][ T4278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 45.275761][ T4278] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.208: corrupted xattr block 6: invalid header [ 45.279880][ T4278] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.208: corrupted xattr block 6: invalid header [ 45.280064][ T4278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 45.280093][ T4278] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #12: comm syz.2.208: corrupted xattr block 6: invalid header [ 45.280287][ T4278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 45.295165][ T313] team0 (unregistering): Port device team_slave_0 removed [ 45.309687][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.334172][ T4287] Invalid argument reading file caps for ./file0 [ 45.389089][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.389124][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.389234][ T4172] bridge_slave_1: entered allmulticast mode [ 45.389817][ T4172] bridge_slave_1: entered promiscuous mode [ 45.411762][ T4282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.558300][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.559352][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.576392][ T4172] team0: Port device team_slave_0 added [ 45.579094][ T4172] team0: Port device team_slave_1 added [ 45.600589][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.600686][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.600716][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.601414][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.601427][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.601528][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.698399][ T4172] hsr_slave_0: entered promiscuous mode [ 45.698874][ T4172] hsr_slave_1: entered promiscuous mode [ 45.699107][ T4172] debugfs: 'hsr0' already exists in 'hsr' [ 45.699124][ T4172] Cannot create hsr debugfs directory [ 45.941564][ T4325] loop2: detected capacity change from 0 to 128 [ 45.962542][ T9] kernel read not supported for file / (pid: 9 comm: kworker/0:0) [ 46.851226][ T4346] sg_write: data in/out 461547/217 bytes for SCSI command 0x0-- guessing data in; [ 46.851226][ T4346] program syz.2.230 not setting count and/or reply_len properly [ 46.883520][ T4343] sd 0:0:1:0: device reset [ 46.959584][ T4348] loop2: detected capacity change from 0 to 8192 [ 46.961727][ T4348] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.973215][ T4352] SELinux: DCCP has been removed, pid=4352 comm=syz.3.233 [ 46.973461][ T4352] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 46.973475][ T4352] netlink: 256 bytes leftover after parsing attributes in process `syz.3.233'. [ 47.031490][ T4356] veth0: entered promiscuous mode [ 47.088255][ T4355] veth0: left promiscuous mode [ 47.692958][ T4392] sd 0:0:1:0: device reset [ 48.464469][ T4293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.465823][ T4172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.483389][ T4172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.483946][ T4172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.485892][ T4172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.510026][ T4172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.527350][ T4172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.527932][ T4398] netlink: 'syz.5.249': attribute type 12 has an invalid length. [ 48.529175][ T4172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.530236][ T4401] loop2: detected capacity change from 0 to 256 [ 48.567114][ T4172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.609753][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.615721][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.633306][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.633344][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.652741][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.652775][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.984665][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.173994][ T4172] veth0_vlan: entered promiscuous mode [ 49.181719][ T4172] veth1_vlan: entered promiscuous mode [ 49.209920][ T4172] veth0_macvtap: entered promiscuous mode [ 49.213815][ T4172] veth1_macvtap: entered promiscuous mode [ 49.239142][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.243955][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.276236][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.276361][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.276401][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.276435][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.360976][ T12] IPVS: starting estimator thread 0... [ 49.446075][ T4482] IPVS: using max 2304 ests per chain, 115200 per kthread [ 49.507546][ T4492] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 49.513886][ T4491] loop1: detected capacity change from 0 to 1024 [ 49.539237][ T4491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.561580][ T4491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.586109][ T4492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.621935][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 49.621952][ T29] audit: type=1400 audit(1790310100.973:396): avc: denied { mounton } for pid=4490 comm="syz.1.267" path="/" dev="ramfs" ino=9521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 49.668682][ T4497] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 49.736366][ T29] audit: type=1400 audit(1790310101.093:397): avc: denied { unmount } for pid=4172 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.899136][ T29] audit: type=1400 audit(1790310101.253:398): avc: denied { mounton } for pid=4505 comm="syz.3.262" path="/62/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 49.899786][ T3403] kernel write not supported for file task/156/attr/keycreate (pid: 3403 comm: kworker/1:5) [ 50.025363][ T29] audit: type=1400 audit(1790310101.373:399): avc: denied { create } for pid=4518 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.057277][ T29] audit: type=1400 audit(1790310101.413:400): avc: denied { bind } for pid=4518 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.057667][ T29] audit: type=1400 audit(1790310101.413:401): avc: denied { listen } for pid=4518 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.058191][ T29] audit: type=1400 audit(1790310101.413:402): avc: denied { connect } for pid=4518 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.058519][ T29] audit: type=1400 audit(1790310101.413:403): avc: denied { read } for pid=4518 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.062449][ T4533] loop3: detected capacity change from 0 to 512 [ 51.062852][ T4533] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.117753][ T4172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.124081][ T4537] loop3: detected capacity change from 0 to 256 [ 51.147223][ T4537] FAT-fs (loop3): codepage cp862 not found [ 51.375225][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.375261][ T4540] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.375399][ T4540] bridge_slave_0: entered allmulticast mode [ 51.375807][ T4540] bridge_slave_0: entered promiscuous mode [ 51.377490][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.377524][ T4540] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.377651][ T4540] bridge_slave_1: entered allmulticast mode [ 51.378125][ T4540] bridge_slave_1: entered promiscuous mode [ 51.391025][ T4540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.392420][ T4540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.403932][ T4540] team0: Port device team_slave_0 added [ 51.405010][ T4540] team0: Port device team_slave_1 added [ 51.415282][ T4540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.415298][ T4540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.415326][ T4540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.415878][ T4540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.415890][ T4540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.415930][ T4540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.434635][ T4540] hsr_slave_0: entered promiscuous mode [ 51.435141][ T4540] hsr_slave_1: entered promiscuous mode [ 51.435432][ T4540] debugfs: 'hsr0' already exists in 'hsr' [ 51.435447][ T4540] Cannot create hsr debugfs directory [ 51.633622][ T4543] loop3: detected capacity change from 0 to 1024 [ 51.651645][ T4543] EXT4-fs: Ignoring removed orlov option [ 51.668516][ T4543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.689104][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.272742][ T29] audit: type=1400 audit(1790310103.623:404): avc: denied { write } for pid=4567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.305487][ T29] audit: type=1400 audit(1790310103.653:405): avc: denied { write } for pid=4578 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.651258][ T4582] loop3: detected capacity change from 0 to 512 [ 52.715717][ T4583] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 50) [ 52.977697][ T4512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 52.980155][ T4540] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 53.001607][ T4540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.002396][ T4540] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 53.005435][ T4540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.028929][ T4540] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 53.044170][ T4540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.044720][ T4540] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 53.057266][ T4540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.060630][ T4589] netlink: 'syz.6.283': attribute type 12 has an invalid length. [ 53.130995][ T4540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.141169][ T4540] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.154869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.154933][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.166720][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.166753][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.211708][ T4602] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc00 [ 53.259255][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 53.363019][ T4540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.582751][ T4540] veth0_vlan: entered promiscuous mode [ 53.593358][ T4540] veth1_vlan: entered promiscuous mode [ 53.606326][ T4540] veth0_macvtap: entered promiscuous mode [ 53.608193][ T4540] veth1_macvtap: entered promiscuous mode [ 53.613992][ T4540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.629127][ T4540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.764405][ T12] IPVS: starting estimator thread 0... [ 53.808456][ T3446] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.808502][ T3446] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.808545][ T3446] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.808580][ T3446] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.856436][ T4660] IPVS: using max 2448 ests per chain, 122400 per kthread [ 54.131593][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.299'. [ 54.168706][ T4689] hsr_slave_1 (unregistering): left promiscuous mode [ 54.627111][ T4724] loop3: detected capacity change from 0 to 256 [ 54.853737][ T4727] ================================================================== [ 54.853773][ T4727] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 54.853809][ T4727] [ 54.853824][ T4727] write to 0xffff8881046a25e0 of 8 bytes by task 4724 on cpu 1: [ 54.853841][ T4727] filemap_splice_read+0x52a/0x790 [ 54.853867][ T4727] splice_direct_to_actor+0x261/0x680 [ 54.853888][ T4727] do_splice_direct+0x119/0x1a0 [ 54.853907][ T4727] do_sendfile+0x37d/0x640 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 54.853925][ T4727] __x64_sys_sendfile64+0x105/0x150 [ 54.853955][ T4727] x64_sys_call+0x1015/0x2550 [ 54.853984][ T4727] do_syscall_64+0x112/0x360 [ 54.854003][ T4727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.854025][ T4727] [ 54.854031][ T4727] write to 0xffff8881046a25e0 of 8 bytes by task 4727 on cpu 0: [ 54.854048][ T4727] filemap_splice_read+0x52a/0x790 [ 54.854072][ T4727] splice_direct_to_actor+0x261/0x680 [ 54.854092][ T4727] do_splice_direct+0x119/0x1a0 [ 54.854110][ T4727] do_sendfile+0x37d/0x640 [ 54.854128][ T4727] __x64_sys_sendfile64+0x105/0x150 [ 54.854157][ T4727] x64_sys_call+0x1015/0x2550 [ 54.854185][ T4727] do_syscall_64+0x112/0x360 [ 54.854203][ T4727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.854225][ T4727] [ 54.854230][ T4727] value changed: 0x00000000000005d0 -> 0x00000000000005d4 [ 54.854242][ T4727] [ 54.854247][ T4727] Reported by Kernel Concurrency Sanitizer on: [ 54.854259][ T4727] CPU: 0 UID: 0 PID: 4727 Comm: syz.3.304 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.854286][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.854299][ T4727] ================================================================== [ 54.854720][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 54.854734][ T29] audit: type=1400 audit(1790310106.203:421): avc: denied { write } for pid=4719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.882570][ T29] audit: type=1400 audit(1790310106.233:422): avc: denied { write } for pid=4738 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.159236][ T4724] bond0: (slave syz_tun): Releasing backup interface [ 55.186845][ T29] audit: type=1400 audit(1790310106.543:423): avc: denied { write } for pid=4741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.226626][ T29] audit: type=1400 audit(1790310106.583:424): avc: denied { write } for pid=4752 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.298630][ T29] audit: type=1400 audit(1790310106.653:425): avc: denied { write } for pid=4755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.336960][ T29] audit: type=1400 audit(1790310106.693:426): avc: denied { write } for pid=4767 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1